It is valid for them to make sure accounts cannot be taken over by hostile actors, and it is valid for them to assume that you are able to notify them about email address changes in time.

Tell me, how many years did you have to resolve the situation regarding your email address before it came to this?